last executing test programs: 9.57840141s ago: executing program 1 (id=793): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 8.329716617s ago: executing program 1 (id=796): socket$inet6(0xa, 0x80002, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0xa, 0x2) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb45ffffe, 0x7fffffff}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) r2 = msgget$private(0x0, 0xd) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1800000076000000009350f6ec07ffd8207995a0b9f8eea73cdee30ab7858e1ee85c31d617c25953bfa103cfb2d15a8e4789bd9c9b2942874fee0200ad882d8c5768001a307db1bfa296ad9dbfa72a4699f2b67aa9c63546e9b9f32d8ffe300800959ceb27b075b08e3533060e5db0ab91f242ffad7d947acef2e3a6c7fa1a2c0000000000000000000000000000000408f620cdeed58ffd3eb4f77492bfbd0f90851c71ce345fbd1b3fbe0efacfabf62af77db8d0f1deb756a82e4a4304f80559610abf55328f279b149c"], 0x18}], 0x1}, 0x0) msgctl$IPC_STAT(r2, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 6.937254809s ago: executing program 4 (id=804): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.814150474s ago: executing program 0 (id=805): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) socket$kcm(0x10, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) membarrier(0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010020000000000000000900020073797a310000000008004100727865001400330074655ffe9c95560b346176655f300000"], 0x38}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.209661042s ago: executing program 4 (id=807): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5.068682929s ago: executing program 4 (id=810): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="ee", 0x1}], 0x1}}], 0x1, 0x0) 4.959348811s ago: executing program 0 (id=812): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000004b12d34ab5834104a2c2e89ca036bfe2f5483898810f593ff77b3ba9321cee00fd44bfc2", @ANYBLOB="0101", @ANYBLOB="040046000400518005003400f700"], 0x34}}, 0x20000040) 4.841365717s ago: executing program 1 (id=813): epoll_create1(0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) timer_delete(r1) r2 = gettid() tkill(r2, 0x14) capset(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x5}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x1c, 0x1, 0x0, 0x0, "023904bfaf9360a04146c3ed9a438c8bb13ee443ad62225f28d4773bc71b85c32740bfe3ccf5df21a7143836b9f5dd41dd589269ea04b2627f8836838b034a97"}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x48000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000000)=0x21, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000200)=""/128, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) 4.804047212s ago: executing program 3 (id=814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 4.80380411s ago: executing program 4 (id=815): landlock_create_ruleset(&(0x7f0000000380)={0x5014, 0x0, 0x1}, 0x18, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x10) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) lseek(r2, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x10, 0x521b83) socket(0xf, 0x3, 0x20000) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x1}) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 4.570511693s ago: executing program 2 (id=816): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900", 0x2a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="0f01f466b80500000066b90b0000000f01c10f0fb900009e0f1b1f0fc75eb50f01c566b91f0001c00f32660f383fe9f39066b9400a00000f32", 0x39}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) 4.203243305s ago: executing program 3 (id=817): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000009240)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)='C', 0x1}], 0x1}}], 0x1, 0x24005805) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x800) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) 3.762348663s ago: executing program 4 (id=818): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.551759903s ago: executing program 0 (id=819): gettid() timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) 3.551135609s ago: executing program 2 (id=820): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) 2.743411831s ago: executing program 0 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], &(0x7f00000007c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x28c4, &(0x7f0000000480)={0x0, 0xb065, 0x1, 0x3, 0x2e}, &(0x7f0000000500), &(0x7f0000000540)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x1c, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000680)=@pptp={0x18, 0x2, {0x2, @local}}, 0x0, 0x0, 0x0, {0x0, r2}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x103280) io_setup(0x6, &(0x7f0000001380)) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) 2.742515416s ago: executing program 1 (id=822): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) socket$kcm(0x10, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) membarrier(0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010020000000000000000900020073797a310000000008004100727865001400330074655ffe9c95560b346176655f300000"], 0x38}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.742290041s ago: executing program 4 (id=823): socket$inet6(0xa, 0x80002, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb45ffffe, 0x7fffffff}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) r2 = msgget$private(0x0, 0xd) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1800000076000000009350f6ec07ffd8207995a0b9f8eea73cdee30ab7858e1ee85c31d617c25953bfa103cfb2d15a8e4789bd9c9b2942874fee0200ad882d8c5768001a307db1bfa296ad9dbfa72a4699f2b67aa9c63546e9b9f32d8ffe300800959ceb27b075b08e3533060e5db0ab91f242ffad7d947acef2e3a6c7fa1a2c0000000000000000000000000000000408f620cdeed58ffd3eb4f77492bfbd0f90851c71ce345fbd1b3fbe0efacfabf62af77db8d0f1deb756a82e4a4304f80559610abf55328f279b149c"], 0x18}], 0x1}, 0x0) msgctl$IPC_STAT(r2, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 2.603791423s ago: executing program 2 (id=824): getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.432928778s ago: executing program 2 (id=825): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.432404056s ago: executing program 3 (id=826): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) socket$kcm(0x10, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd, 0x61}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) pipe2$watch_queue(&(0x7f0000000080), 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) membarrier(0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$netlink(0x10, 0x3, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.658828567s ago: executing program 3 (id=827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) 1.536382251s ago: executing program 0 (id=828): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000000000000000000000000000000000000008"], 0x878) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.512238444s ago: executing program 2 (id=829): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x4, 0x0, 0x402], [0x0, 0x8, 0x0, 0x0, 0x801, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xa4c6}]}}]}, 0x98}}, 0x10) 1.475905379s ago: executing program 1 (id=830): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000004b12d34ab5834104a2c2e89ca036bfe2f5483898810f593ff77b3ba9321cee00fd44bfc2", @ANYBLOB="0101", @ANYBLOB="040046000400518005003400f700"], 0x34}}, 0x20000040) 1.424813549s ago: executing program 3 (id=831): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf4, 0xf4, 0x0, 0xffffffff, 0xffffffff, 0x2cc, 0x2cc, 0x2cc, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, 0xffffff00, 0x0, 'batadv0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x5e, 0x1, 0x1}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x0, 0x5, 0x9, 0x1, 0x1, 0x2], 0x2}}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff7f, 0xffffff00, 'netdevsim0\x00', 'batadv_slave_0\x00', {}, {}, 0x5c, 0x2, 0x22}, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x0, 0x0, 0x6, 0x6, 0x4], 0x5, 0x1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x8, 0x5, [0x1b, 0x9, 0x2d, 0x35, 0x26, 0x21, 0x3a, 0x18, 0x31, 0x7, 0x28, 0xc, 0x3, 0x1a, 0x8, 0x2c], 0x2, 0x5, 0x1}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x7, 0x2, [0x7, 0x18, 0x35, 0xe, 0x3, 0x30, 0x1e, 0x2a, 0x33, 0x13, 0x15, 0x22, 0x1c, 0x6, 0x35, 0x35], 0x1, 0x1000, 0xc0}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3bc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tkill(r1, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x4, 0x3fc, 0x0, 0x32}, 0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a000000"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000100)=0xffffffff, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.268671313s ago: executing program 0 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c000c09fa67667cf7c3a59c3afc9778f948302260666e316ef37ef79b2a64ea579aa63c46354ac5205e01eb247c30b2294b2778960edee42def520239c281649aca0383c72e2b9a73be7f000a0719669e28c0e014f5a1b052d561575702"]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) 1.069400033s ago: executing program 2 (id=833): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 292.471246ms ago: executing program 3 (id=834): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000009240)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)='C', 0x1}], 0x1}}], 0x1, 0x24005805) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x800) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) 0s ago: executing program 1 (id=835): epoll_create1(0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) timer_delete(r1) r2 = gettid() tkill(r2, 0x14) capset(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x5}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x1c, 0x1, 0x0, 0x0, "023904bfaf9360a04146c3ed9a438c8bb13ee443ad62225f28d4773bc71b85c32740bfe3ccf5df21a7143836b9f5dd41dd589269ea04b2627f8836838b034a97"}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x48000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000000)=0x21, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000200)=""/128, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 63.951070][ T5817] cgroup: Unknown subsys name 'net' [ 64.099985][ T5817] cgroup: Unknown subsys name 'cpuset' [ 64.108236][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.409004][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.896715][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.905315][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.914560][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.923001][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.931501][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.940983][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.948858][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.956210][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.964996][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.972828][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.980009][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.981090][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.997963][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.005579][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.012969][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.042065][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.046257][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.057957][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.058127][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.072405][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.078802][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.088310][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.098042][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.105583][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.147188][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.155755][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.164080][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.174034][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.181712][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.197050][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.308978][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 68.566009][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.574501][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.582286][ T5827] bridge_slave_0: entered allmulticast mode [ 68.591007][ T5827] bridge_slave_0: entered promiscuous mode [ 68.610971][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.618439][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.625599][ T5827] bridge_slave_1: entered allmulticast mode [ 68.633293][ T5827] bridge_slave_1: entered promiscuous mode [ 68.666380][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 68.689348][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.710919][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 68.731307][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.790614][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 68.830701][ T5827] team0: Port device team_slave_0 added [ 68.874966][ T5827] team0: Port device team_slave_1 added [ 68.914502][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 68.962363][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.970096][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.996663][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.010018][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.017128][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.043381][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.071335][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.078809][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.086003][ T5843] bridge_slave_0: entered allmulticast mode [ 69.092979][ T5843] bridge_slave_0: entered promiscuous mode [ 69.102132][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.109425][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.116611][ T5843] bridge_slave_1: entered allmulticast mode [ 69.124284][ T5843] bridge_slave_1: entered promiscuous mode [ 69.149648][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.156764][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.164670][ T5842] bridge_slave_0: entered allmulticast mode [ 69.171869][ T5842] bridge_slave_0: entered promiscuous mode [ 69.205860][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.225341][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.232840][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.240595][ T5842] bridge_slave_1: entered allmulticast mode [ 69.247568][ T5842] bridge_slave_1: entered promiscuous mode [ 69.254655][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.262405][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.270014][ T5837] bridge_slave_0: entered allmulticast mode [ 69.276703][ T5837] bridge_slave_0: entered promiscuous mode [ 69.288780][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.310938][ T5827] hsr_slave_0: entered promiscuous mode [ 69.317640][ T5827] hsr_slave_1: entered promiscuous mode [ 69.342279][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.352475][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.360933][ T5837] bridge_slave_1: entered allmulticast mode [ 69.367814][ T5837] bridge_slave_1: entered promiscuous mode [ 69.404986][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.416663][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.440334][ T5843] team0: Port device team_slave_0 added [ 69.482382][ T5843] team0: Port device team_slave_1 added [ 69.520835][ T5842] team0: Port device team_slave_0 added [ 69.539314][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.551179][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.569790][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.577439][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.584706][ T5828] bridge_slave_0: entered allmulticast mode [ 69.592542][ T5828] bridge_slave_0: entered promiscuous mode [ 69.601667][ T5842] team0: Port device team_slave_1 added [ 69.625983][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.633217][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.659208][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.670950][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.678621][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.685819][ T5828] bridge_slave_1: entered allmulticast mode [ 69.693299][ T5828] bridge_slave_1: entered promiscuous mode [ 69.708080][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.715064][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.741055][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.757031][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.764062][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.790689][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.811808][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.818992][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.845189][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.876378][ T5837] team0: Port device team_slave_0 added [ 69.885495][ T5837] team0: Port device team_slave_1 added [ 69.924858][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.961393][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.968466][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.995111][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.008638][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.028105][ T5834] Bluetooth: hci0: command tx timeout [ 70.056159][ T5842] hsr_slave_0: entered promiscuous mode [ 70.065559][ T5842] hsr_slave_1: entered promiscuous mode [ 70.072001][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.080429][ T5842] Cannot create hsr debugfs directory [ 70.086306][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.093465][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.103226][ T5834] Bluetooth: hci2: command tx timeout [ 70.120177][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.155686][ T5843] hsr_slave_0: entered promiscuous mode [ 70.162776][ T5843] hsr_slave_1: entered promiscuous mode [ 70.169463][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.177705][ T5834] Bluetooth: hci3: command tx timeout [ 70.177747][ T5831] Bluetooth: hci1: command tx timeout [ 70.185372][ T5843] Cannot create hsr debugfs directory [ 70.215168][ T5828] team0: Port device team_slave_0 added [ 70.224756][ T5828] team0: Port device team_slave_1 added [ 70.257390][ T5831] Bluetooth: hci4: command tx timeout [ 70.314524][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.321766][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.348047][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.360995][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.368831][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.394903][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.418470][ T5837] hsr_slave_0: entered promiscuous mode [ 70.425041][ T5837] hsr_slave_1: entered promiscuous mode [ 70.432109][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.441120][ T5837] Cannot create hsr debugfs directory [ 70.554533][ T5828] hsr_slave_0: entered promiscuous mode [ 70.561413][ T5828] hsr_slave_1: entered promiscuous mode [ 70.568129][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.575710][ T5828] Cannot create hsr debugfs directory [ 70.640435][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.685063][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.711006][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.746217][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.798967][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.833371][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.861596][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.873877][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.945830][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.970660][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.981312][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.002857][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.036131][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.069904][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.099733][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.125339][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.180019][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.204888][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.227626][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.247618][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.259091][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.309924][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.348740][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.356013][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.368836][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.375932][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.425061][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.477981][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.503678][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.522312][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.548327][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.587195][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.594335][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.621090][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.642208][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.649389][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.664086][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.671312][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.705224][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.712385][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.724205][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.731371][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.761971][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.769140][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.810854][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.870834][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.934780][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.984408][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.052763][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.059941][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.069408][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.076737][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.097730][ T5831] Bluetooth: hci0: command tx timeout [ 72.178296][ T5831] Bluetooth: hci2: command tx timeout [ 72.183198][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.206003][ T5827] veth0_vlan: entered promiscuous mode [ 72.233999][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.253355][ T5827] veth1_vlan: entered promiscuous mode [ 72.259871][ T5831] Bluetooth: hci3: command tx timeout [ 72.260476][ T5834] Bluetooth: hci1: command tx timeout [ 72.339158][ T5834] Bluetooth: hci4: command tx timeout [ 72.362817][ T5827] veth0_macvtap: entered promiscuous mode [ 72.376230][ T5842] veth0_vlan: entered promiscuous mode [ 72.405258][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.416399][ T5827] veth1_macvtap: entered promiscuous mode [ 72.463762][ T5842] veth1_vlan: entered promiscuous mode [ 72.491026][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.500676][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.559285][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.573919][ T5837] veth0_vlan: entered promiscuous mode [ 72.602775][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.627920][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.636836][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.653533][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.664561][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.690797][ T5837] veth1_vlan: entered promiscuous mode [ 72.741194][ T5842] veth0_macvtap: entered promiscuous mode [ 72.795738][ T5842] veth1_macvtap: entered promiscuous mode [ 72.823727][ T5837] veth0_macvtap: entered promiscuous mode [ 72.870129][ T5837] veth1_macvtap: entered promiscuous mode [ 72.888372][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.901604][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.915233][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.928263][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.939788][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.950531][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.961158][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.973580][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.996541][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.006200][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016214][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.025626][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.040596][ T5828] veth0_vlan: entered promiscuous mode [ 73.073640][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.084516][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.095104][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.105953][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.118778][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.135266][ T5843] veth0_vlan: entered promiscuous mode [ 73.145094][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.154936][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.164701][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.175762][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.186121][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.196624][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.208059][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.232241][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.242413][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.248212][ T5828] veth1_vlan: entered promiscuous mode [ 73.271005][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280138][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290061][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299841][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.313166][ T5843] veth1_vlan: entered promiscuous mode [ 73.355760][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.373593][ T5843] veth0_macvtap: entered promiscuous mode [ 73.408634][ T5828] veth0_macvtap: entered promiscuous mode [ 73.437863][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.448931][ T5828] veth1_macvtap: entered promiscuous mode [ 73.456140][ T5843] veth1_macvtap: entered promiscuous mode [ 73.464152][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.532618][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555713][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.562994][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.563047][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.563059][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.563072][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.563082][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.563094][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.564167][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.662863][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.680384][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.692787][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.706445][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.721812][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.735142][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.758434][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.768804][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.787783][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.798059][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.808643][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.818558][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.829090][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.839387][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.850894][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.862393][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.874568][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.885119][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.895196][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.905758][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.916690][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.927275][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.938270][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.949896][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.960928][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.003417][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.012937][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.025335][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.034535][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.049825][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.059176][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.068394][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.077542][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127210][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.128231][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.135063][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.151376][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.182433][ T5834] Bluetooth: hci0: command tx timeout [ 74.278969][ T5834] Bluetooth: hci2: command tx timeout [ 74.322719][ T5915] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.332126][ T5915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.341225][ T5834] Bluetooth: hci1: command tx timeout [ 74.347508][ T5834] Bluetooth: hci3: command tx timeout [ 74.353367][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.362917][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.475114][ T5834] Bluetooth: hci4: command tx timeout [ 74.494300][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.606131][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.253768][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.265764][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.313010][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.329513][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.365988][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.376619][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.504296][ T5925] input: syz0 as /devices/virtual/input/input5 [ 75.529722][ T57] kernel read not supported for file /bus/input/devices (pid: 57 comm: kworker/1:1) [ 75.746163][ T5930] fuse: Bad value for 'fd' [ 75.879294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.897324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.987558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.996384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.005017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.013806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.022961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.142933][ T5944] nbd4: detected capacity change from 0 to 22 [ 76.182916][ T5930] block nbd4: shutting down sockets [ 76.207248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.229000][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.253963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.263681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.298997][ T5834] Bluetooth: hci0: command tx timeout [ 76.360029][ T5829] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.368014][ T5834] Bluetooth: hci2: command tx timeout [ 76.400677][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.415887][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.420516][ T5834] Bluetooth: hci3: command tx timeout [ 76.428141][ T5831] Bluetooth: hci1: command tx timeout [ 76.443581][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.459219][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.474736][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.489443][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.500845][ T5831] Bluetooth: hci4: command tx timeout [ 76.510693][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.519235][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.538211][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.582606][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.641111][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.649761][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.660598][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.670774][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.680233][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.688449][ T5832] ldm_validate_partition_table(): Disk read failed. [ 76.695395][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.705761][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.714067][ T5832] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.724480][ T5832] Buffer I/O error on dev nbd4, logical block 0, async page read [ 76.727394][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 76.732849][ T5832] Dev nbd4: unable to read RDB block 0 [ 76.743482][ T5832] nbd4: unable to read partition table [ 76.749980][ T5832] nbd4: partition table beyond EOD, truncated [ 76.762422][ T5832] ldm_validate_partition_table(): Disk read failed. [ 76.777667][ T5832] Dev nbd4: unable to read RDB block 0 [ 76.783744][ T5832] nbd4: unable to read partition table [ 76.790170][ T5832] nbd4: partition table beyond EOD, truncated [ 76.903179][ T5829] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 76.924563][ T5829] usb 1-1: config 179 has no interface number 0 [ 76.962516][ T5829] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 77.013996][ T5829] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 77.043508][ T5829] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.066407][ T5829] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.080133][ T5829] usb 1-1: config 179 interface 65 has no altsetting 0 [ 77.088908][ T5829] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 77.098709][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.186183][ T5943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.141419][ T5829] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 78.182425][ T5190] input input6: unable to receive magic message: -32 [ 78.317693][ T5941] capability: warning: `syz.1.10' uses 32-bit capabilities (legacy support in use) [ 78.627332][ T5190] input input6: unable to receive magic message: -110 [ 78.937580][ T5190] input input6: unable to receive magic message: -110 [ 78.999401][ T5190] input input6: unable to receive magic message: -32 [ 79.118654][ T5190] input input6: unable to receive magic message: -32 [ 79.346540][ T5190] input input6: unable to receive magic message: -32 [ 79.487158][ T5943] input input6: unable to receive magic message: -32 [ 79.502042][ T5977] input: syz0 as /devices/virtual/input/input7 [ 79.574960][ T5879] kernel read not supported for file /bus/input/devices (pid: 5879 comm: kworker/1:5) [ 79.614165][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.614242][ T5879] usb 1-1: USB disconnect, device number 2 [ 79.694483][ T5879] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 79.721287][ T5979] netlink: 216 bytes leftover after parsing attributes in process `syz.1.22'. [ 79.898808][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 79.916349][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 80.861488][ T5987] fuse: Bad value for 'fd' [ 82.159470][ T6006] netlink: 84 bytes leftover after parsing attributes in process `syz.0.28'. [ 83.269649][ T5987] nbd2: detected capacity change from 0 to 22 [ 84.512020][ T6021] blktrace: Concurrent blktraces are not allowed on sg0 [ 84.758576][ T5987] block nbd2: shutting down sockets [ 85.558254][ C1] blk_print_req_error: 25 callbacks suppressed [ 85.558272][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.573641][ C1] buffer_io_error: 25 callbacks suppressed [ 85.573656][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.698607][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.709354][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.719674][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.737830][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.755528][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.797845][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.807696][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.818609][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.826683][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.835954][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.844044][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.868057][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.876027][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.885301][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.893560][ T5832] ldm_validate_partition_table(): Disk read failed. [ 85.900598][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.909864][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.918617][ T5832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.928440][ T5832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.936501][ T5832] Dev nbd2: unable to read RDB block 0 [ 85.942576][ T5832] nbd2: unable to read partition table [ 85.948447][ T5832] nbd2: partition table beyond EOD, truncated [ 85.995190][ T5832] ldm_validate_partition_table(): Disk read failed. [ 86.002664][ T5832] Dev nbd2: unable to read RDB block 0 [ 86.008923][ T5832] nbd2: unable to read partition table [ 86.014662][ T5832] nbd2: partition table beyond EOD, truncated [ 87.007520][ T6030] ucma_write: process 31 (syz.3.36) changed security contexts after opening file descriptor, this is not allowed. [ 88.998200][ T974] cfg80211: failed to load regulatory.db [ 89.006389][ T6067] fuse: Bad value for 'fd' [ 89.287965][ T6073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.321423][ T6081] 9pnet_fd: Insufficient options for proto=fd [ 90.660680][ T6071] nbd1: detected capacity change from 0 to 22 [ 90.694554][ T6084] block nbd1: shutting down sockets [ 90.707821][ T5832] blk_print_req_error: 25 callbacks suppressed [ 90.707840][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.750957][ T5832] buffer_io_error: 25 callbacks suppressed [ 90.750972][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 90.847306][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.856407][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 90.864533][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.873896][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 90.882567][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.964604][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 90.983988][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.052372][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 91.163628][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.240348][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 91.249123][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.259262][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 91.268086][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.277647][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 91.285676][ T5832] ldm_validate_partition_table(): Disk read failed. [ 91.293544][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.312722][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 91.323095][ T5832] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.332990][ T5832] Buffer I/O error on dev nbd1, logical block 0, async page read [ 91.343200][ T5832] Dev nbd1: unable to read RDB block 0 [ 91.349474][ T5832] nbd1: unable to read partition table [ 91.355939][ T5832] nbd1: partition table beyond EOD, truncated [ 91.370358][ T5832] ldm_validate_partition_table(): Disk read failed. [ 91.388543][ T5832] Dev nbd1: unable to read RDB block 0 [ 91.424020][ T5832] nbd1: unable to read partition table [ 91.445787][ T5832] nbd1: partition table beyond EOD, truncated [ 91.814650][ T6114] 9pnet_fd: Insufficient options for proto=fd [ 92.616726][ T6115] blktrace: Concurrent blktraces are not allowed on sg0 [ 92.694309][ T6115] netlink: 84 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.704305][ T6147] blktrace: Concurrent blktraces are not allowed on sg0 [ 94.745466][ T6150] 9pnet_fd: Insufficient options for proto=fd [ 94.807802][ T6144] netlink: 84 bytes leftover after parsing attributes in process `syz.1.74'. [ 99.380538][ T6219] blktrace: Concurrent blktraces are not allowed on sg0 [ 99.483491][ T6219] netlink: 84 bytes leftover after parsing attributes in process `syz.4.99'. [ 104.138200][ T6275] blktrace: Concurrent blktraces are not allowed on sg0 [ 104.172097][ T6275] netlink: 84 bytes leftover after parsing attributes in process `syz.1.120'. [ 107.778533][ T6325] blktrace: Concurrent blktraces are not allowed on sg0 [ 107.792894][ T6325] netlink: 84 bytes leftover after parsing attributes in process `syz.4.136'. [ 112.404372][ T6374] blktrace: Concurrent blktraces are not allowed on sg0 [ 112.412987][ T6374] netlink: 84 bytes leftover after parsing attributes in process `syz.4.150'. [ 113.831647][ T6390] netlink: 'syz.0.157': attribute type 10 has an invalid length. [ 113.944783][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.741306][ T6390] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.578113][ T6438] blktrace: Concurrent blktraces are not allowed on sg0 [ 119.617096][ T974] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.836966][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 119.887166][ T974] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.940424][ T974] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.991972][ T974] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.789298][ T974] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.802475][ T974] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.811655][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.865597][ T6465] blktrace: Concurrent blktraces are not allowed on sg0 [ 120.874764][ T6465] netlink: 84 bytes leftover after parsing attributes in process `syz.3.176'. [ 121.038040][ T974] usb 1-1: usb_control_msg returned -32 [ 121.047749][ T974] usbtmc 1-1:16.0: can't read capabilities [ 121.207035][ T974] usb 1-1: USB disconnect, device number 3 [ 125.317268][ T6512] Zero length message leads to an empty skb [ 125.505468][ T6517] netlink: 'syz.1.195': attribute type 10 has an invalid length. [ 125.691540][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.700516][ T6517] bond0: (slave team0): Enslaving as an active interface with an up link [ 126.777365][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.317264][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 127.361561][ T5879] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.381741][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.437196][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.474726][ T5879] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.503379][ T5879] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.537065][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.786545][ T5879] usb 1-1: usb_control_msg returned -32 [ 127.822141][ T5879] usbtmc 1-1:16.0: can't read capabilities [ 127.900122][ T5879] usb 1-1: USB disconnect, device number 4 [ 134.368001][ T974] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.714213][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.288511][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.298498][ T6640] blktrace: Concurrent blktraces are not allowed on sg0 [ 135.374039][ T974] usb 2-1: device descriptor read/64, error -71 [ 135.412194][ T6640] netlink: 84 bytes leftover after parsing attributes in process `syz.0.235'. [ 136.496711][ T6642] blktrace: Concurrent blktraces are not allowed on sg0 [ 136.526674][ T6642] netlink: 84 bytes leftover after parsing attributes in process `syz.4.231'. [ 136.662539][ T974] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.712659][ T6643] insert transport fail, errno -7 [ 136.827068][ T974] usb 2-1: device descriptor read/64, error -71 [ 136.942376][ T974] usb usb2-port1: attempt power cycle [ 140.451302][ T6701] netlink: 'syz.2.259': attribute type 10 has an invalid length. [ 140.538808][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.554990][ T6701] bond0: (slave team0): Enslaving as an active interface with an up link [ 140.577073][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.758330][ T5879] usb 2-1: device descriptor read/64, error -71 [ 142.078977][ T6714] blktrace: Concurrent blktraces are not allowed on sg0 [ 142.087026][ T6714] netlink: 84 bytes leftover after parsing attributes in process `syz.4.263'. [ 142.106946][ T5879] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.710021][ T5879] usb 2-1: device descriptor read/64, error -71 [ 142.967326][ T5879] usb usb2-port1: attempt power cycle [ 143.829747][ T6735] blktrace: Concurrent blktraces are not allowed on sg0 [ 143.847719][ T6735] netlink: 84 bytes leftover after parsing attributes in process `syz.2.267'. [ 144.732565][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.939719][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 145.016420][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.028479][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.029300][ T6756] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 145.039435][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.311172][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.324464][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.333679][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.940012][ T5878] usb 4-1: GET_CAPABILITIES returned 0 [ 145.959835][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 146.686944][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.735853][ T6772] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 146.773593][ T6772] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.782385][ T6772] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.819435][ T5878] usb 1-1: device descriptor read/64, error -71 [ 147.126256][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.242642][ T6782] blktrace: Concurrent blktraces are not allowed on sg0 [ 147.256346][ T6782] netlink: 84 bytes leftover after parsing attributes in process `syz.1.282'. [ 148.217154][ T5878] usb 1-1: device descriptor read/64, error -71 [ 148.253626][ T974] usb 4-1: USB disconnect, device number 2 [ 148.401581][ T5878] usb usb1-port1: attempt power cycle [ 149.267239][ T5878] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.653723][ T5878] usb 1-1: device descriptor read/8, error -71 [ 149.737646][ T6809] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 149.821025][ T6815] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 149.851642][ T6811] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 150.156960][ T5879] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.570188][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 150.798618][ T5879] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.808567][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.818801][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.828793][ T5879] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.842209][ T5879] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.851954][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.667042][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.694533][ T5879] usb 4-1: GET_CAPABILITIES returned 0 [ 152.700248][ T5879] usbtmc 4-1:16.0: can't read capabilities [ 152.807122][ T9] usb 5-1: device descriptor read/64, error -71 [ 153.387320][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.537520][ T9] usb 5-1: device descriptor read/64, error -71 [ 153.647368][ T9] usb usb5-port1: attempt power cycle [ 153.922184][ T974] usb 4-1: USB disconnect, device number 3 [ 153.959193][ T6861] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 154.005376][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.037715][ T9] usb 5-1: device descriptor read/8, error -71 [ 154.187891][ T6867] autofs: Bad value for 'fd' [ 154.250354][ T6869] netlink: 'syz.0.310': attribute type 10 has an invalid length. [ 154.287323][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.319483][ T9] usb 5-1: device descriptor read/8, error -71 [ 154.477029][ T9] usb usb5-port1: unable to enumerate USB device [ 156.449243][ T6890] syz.0.316: attempt to access beyond end of device [ 156.449243][ T6890] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 156.470700][ T6890] XFS (nbd0): SB validate failed with error -5. [ 156.637162][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 156.797159][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 156.808292][ T5876] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.821685][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.835104][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.846732][ T5876] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.860426][ T5876] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.869674][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.172653][ T5876] usb 3-1: GET_CAPABILITIES returned 0 [ 157.179825][ T5876] usbtmc 3-1:16.0: can't read capabilities [ 157.203847][ T6923] netlink: 'syz.4.326': attribute type 10 has an invalid length. [ 157.228595][ T6922] netlink: 'syz.0.325': attribute type 10 has an invalid length. [ 157.367774][ T974] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.387769][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.441920][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.452448][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.461548][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.470609][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.479668][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.488735][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.497829][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.507009][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.516086][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.641661][ T974] usb 2-1: device descriptor read/64, error -71 [ 157.651168][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.660585][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.669711][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.678938][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.688813][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.697934][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 157.899958][ T974] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.039741][ T974] usb 2-1: device descriptor read/64, error -71 [ 158.801993][ T974] usb usb2-port1: attempt power cycle [ 159.146974][ T974] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.173514][ T6948] autofs: Bad value for 'fd' [ 159.181180][ T974] usb 2-1: device descriptor read/8, error -71 [ 159.447097][ T974] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.484471][ T6957] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 159.496687][ T974] usb 2-1: device descriptor read/8, error -71 [ 159.620344][ T5913] usb 3-1: USB disconnect, device number 2 [ 159.696190][ T6962] blktrace: Concurrent blktraces are not allowed on sg0 [ 159.708221][ T6962] netlink: 84 bytes leftover after parsing attributes in process `syz.3.335'. [ 160.403712][ T974] usb usb2-port1: unable to enumerate USB device [ 160.479413][ T6968] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 160.509767][ T6968] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.528768][ T6968] bond0: (slave team0): Enslaving as an active interface with an up link [ 161.044261][ T6981] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 161.157071][ T6987] autofs: Unknown parameter '0x0000000000000000' [ 162.057006][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.227517][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 162.255638][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.258748][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.283406][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.326713][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.372783][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.421071][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.437050][ T5876] usb 1-1: device descriptor read/64, error -71 [ 162.445397][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.673189][ T7008] blktrace: Concurrent blktraces are not allowed on sg0 [ 162.673333][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 162.702144][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.716958][ T9] usbtmc 4-1:16.0: can't read capabilities [ 162.717749][ T7008] netlink: 84 bytes leftover after parsing attributes in process `syz.1.350'. [ 162.887026][ T5876] usb 1-1: device descriptor read/64, error -71 [ 163.008770][ T5876] usb usb1-port1: attempt power cycle [ 163.268841][ T7010] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 163.429198][ T5876] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.465045][ T5876] usb 1-1: device descriptor read/8, error -71 [ 163.507140][ T7014] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 163.792115][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.818861][ T5876] usb 1-1: device descriptor read/8, error -71 [ 163.948572][ T5876] usb usb1-port1: unable to enumerate USB device [ 164.028761][ T7028] netlink: 'syz.2.359': attribute type 10 has an invalid length. [ 164.078466][ T7030] autofs: Unknown parameter '0x0000000000000000' [ 164.928399][ T9] usb 4-1: USB disconnect, device number 4 [ 165.180103][ T7048] netlink: 'syz.3.365': attribute type 10 has an invalid length. [ 165.412946][ T7053] netlink: 'syz.0.367': attribute type 10 has an invalid length. [ 165.859215][ T7060] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 165.888545][ T7066] netlink: 'syz.0.371': attribute type 10 has an invalid length. [ 165.910107][ T7068] autofs: Unknown parameter '0x0000000000000000' [ 167.497128][ T5878] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.586210][ T7084] blktrace: Concurrent blktraces are not allowed on sg0 [ 167.604472][ T7084] netlink: 84 bytes leftover after parsing attributes in process `syz.1.373'. [ 167.669450][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 167.681984][ T5878] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.697047][ T5878] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.720273][ T5878] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.742293][ T5878] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.776515][ T5878] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.799541][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.044176][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.065698][ T5878] usb 5-1: GET_CAPABILITIES returned 0 [ 168.084602][ T5878] usbtmc 5-1:16.0: can't read capabilities [ 168.269910][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.279060][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.288156][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.297216][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.306268][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.317371][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.326666][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.335745][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.344811][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.353891][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.367835][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.376962][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.386065][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.395169][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.404247][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.413324][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.455196][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 168.475943][ T9] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 168.496508][ T7093] netlink: 'syz.2.381': attribute type 10 has an invalid length. [ 168.511568][ T9] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 168.537125][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 168.546384][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.780706][ T7102] blktrace: Concurrent blktraces are not allowed on sg0 [ 168.794634][ T7102] netlink: 84 bytes leftover after parsing attributes in process `syz.0.382'. [ 169.289923][ T5878] usb 4-1: USB disconnect, device number 5 [ 169.580162][ T5876] usb 5-1: USB disconnect, device number 6 [ 169.693201][ T7110] netlink: 'syz.2.384': attribute type 10 has an invalid length. [ 171.209231][ T7139] blktrace: Concurrent blktraces are not allowed on sg0 [ 171.223886][ T7139] netlink: 84 bytes leftover after parsing attributes in process `syz.1.393'. [ 171.985670][ T7140] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 172.066971][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.113983][ T7144] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 172.169750][ T7147] blktrace: Concurrent blktraces are not allowed on sg0 [ 172.187975][ T7147] netlink: 84 bytes leftover after parsing attributes in process `syz.3.389'. [ 172.286946][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 172.302430][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.312981][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.324650][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.334945][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.351620][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.360907][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.679246][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 172.731868][ T9] usbtmc 5-1:16.0: can't read capabilities [ 172.874602][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.883761][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.892850][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.901912][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.910981][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.953005][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.962181][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.971290][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.980430][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.989563][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 173.050708][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 173.056987][ T5876] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 173.059853][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 173.079385][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 173.089241][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 173.098330][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 173.107417][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 173.217808][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 173.256440][ T5876] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 173.272773][ T5876] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 173.284635][ T5876] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 173.356035][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.165053][ T25] usb 3-1: USB disconnect, device number 3 [ 174.223202][ T5876] usb 5-1: USB disconnect, device number 7 [ 174.910372][ T7179] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 175.123081][ T7190] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 176.411236][ T7221] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 176.623675][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 176.787050][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 177.448637][ T7223] syz.2.423: attempt to access beyond end of device [ 177.448637][ T7223] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 177.467329][ T25] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 177.482707][ T25] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 177.492125][ T25] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 177.501967][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.524923][ T7223] XFS (nbd2): SB validate failed with error -5. [ 177.911873][ T5876] usb 1-1: USB disconnect, device number 13 [ 178.051933][ T7245] blktrace: Concurrent blktraces are not allowed on sg0 [ 178.065892][ T7245] netlink: 84 bytes leftover after parsing attributes in process `syz.3.426'. [ 178.853213][ T7250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.429'. [ 179.586385][ T7264] netlink: 'syz.0.434': attribute type 10 has an invalid length. [ 179.638389][ T7261] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 180.347138][ T5878] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.026178][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 181.087420][ T5878] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.096683][ T5878] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 181.197346][ T5878] usb 1-1: config 179 has no interface number 0 [ 181.802956][ T7288] syz.4.440: attempt to access beyond end of device [ 181.802956][ T7288] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 181.823315][ T5878] usb 1-1: config 179 interface 65 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 181.827038][ T7288] XFS (nbd4): SB validate failed with error -5. [ 181.834997][ T5878] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 181.854553][ T5878] usb 1-1: config 179 interface 65 has no altsetting 0 [ 181.867115][ T5878] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 181.876232][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.128095][ T5913] usb 1-1: USB disconnect, device number 14 [ 182.432143][ T7305] blktrace: Concurrent blktraces are not allowed on sg0 [ 182.445770][ T7305] netlink: 84 bytes leftover after parsing attributes in process `syz.2.441'. [ 183.275934][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.442'. [ 184.009366][ T7319] netlink: 'syz.2.447': attribute type 10 has an invalid length. [ 184.186687][ T7327] netlink: 'syz.4.454': attribute type 10 has an invalid length. [ 185.191149][ T7341] netlink: 84 bytes leftover after parsing attributes in process `syz.0.457'. [ 186.467130][ T5913] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.988416][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 187.008814][ T5913] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 187.036977][ T5913] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 187.096373][ T5913] usb 5-1: config 179 has no interface number 0 [ 187.104607][ T5913] usb 5-1: config 179 interface 65 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 187.116135][ T5913] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 187.130073][ T5913] usb 5-1: config 179 interface 65 has no altsetting 0 [ 187.137203][ T5913] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 187.147170][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.328194][ T7370] syz.1.468: attempt to access beyond end of device [ 187.328194][ T7370] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 187.345798][ T7370] XFS (nbd1): SB validate failed with error -5. [ 187.398950][ T5913] usb 5-1: USB disconnect, device number 8 [ 187.452570][ T7382] No control pipe specified [ 187.833524][ T7392] blktrace: Concurrent blktraces are not allowed on sg0 [ 187.847554][ T7392] netlink: 84 bytes leftover after parsing attributes in process `syz.2.470'. [ 188.470560][ T7391] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 188.716766][ T7406] autofs: Bad value for 'fd' [ 188.749457][ T7400] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 189.753860][ T7427] netlink: 'syz.3.485': attribute type 10 has an invalid length. [ 189.907006][ T974] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.057744][ T7432] blktrace: Concurrent blktraces are not allowed on sg0 [ 190.072375][ T7432] netlink: 84 bytes leftover after parsing attributes in process `syz.0.486'. [ 190.907085][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 190.933531][ T974] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.949048][ T7434] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 190.958428][ T974] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 191.019663][ T974] usb 3-1: config 179 has no interface number 0 [ 191.026313][ T974] usb 3-1: config 179 interface 65 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 191.067316][ T974] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 191.117031][ T974] usb 3-1: config 179 interface 65 has no altsetting 0 [ 191.137384][ T974] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 191.159270][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.173122][ T7445] autofs: Bad value for 'fd' [ 191.696025][ T974] usb 3-1: USB disconnect, device number 4 [ 191.842509][ T7454] fuse: Bad value for 'fd' [ 192.225106][ T7465] blktrace: Concurrent blktraces are not allowed on sg0 [ 192.239461][ T7465] netlink: 84 bytes leftover after parsing attributes in process `syz.0.497'. [ 192.341451][ T7466] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 193.065689][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 193.072699][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 193.081582][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 193.087904][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 193.101224][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 193.286084][ T7470] syz.0.499: attempt to access beyond end of device [ 193.286084][ T7470] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 193.308197][ T7470] XFS (nbd0): SB validate failed with error -5. [ 193.532394][ T7480] blktrace: Concurrent blktraces are not allowed on sg0 [ 193.541168][ T7480] netlink: 84 bytes leftover after parsing attributes in process `syz.4.501'. [ 193.766326][ T7488] autofs: Bad value for 'fd' [ 194.525693][ T7498] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 194.962783][ T974] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.979731][ T7511] blktrace: Concurrent blktraces are not allowed on sg0 [ 194.989774][ T7511] netlink: 84 bytes leftover after parsing attributes in process `syz.3.513'. [ 195.126936][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 195.166619][ T974] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 195.227178][ T974] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.261487][ T974] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.284197][ T974] usb 5-1: Product: syz [ 195.296993][ T974] usb 5-1: Manufacturer: syz [ 195.317579][ T974] usb 5-1: SerialNumber: syz [ 195.332778][ T974] usb 5-1: config 0 descriptor?? [ 195.373252][ T7503] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.494530][ T7524] syz.3.517: attempt to access beyond end of device [ 195.494530][ T7524] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 195.525602][ T7532] autofs: Unknown parameter '0x0000000000000000' [ 195.537228][ T7524] XFS (nbd3): SB validate failed with error -5. [ 195.569256][ T7536] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 195.757502][ T5913] usb 5-1: USB disconnect, device number 9 [ 195.973504][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.521'. [ 196.108666][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.115396][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.733726][ T7550] blktrace: Concurrent blktraces are not allowed on sg0 [ 196.741851][ T7550] netlink: 84 bytes leftover after parsing attributes in process `syz.2.525'. [ 197.054098][ T7565] autofs: Unknown parameter '0x0000000000000000' [ 197.163405][ T7572] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 197.508902][ T7578] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 197.804359][ T7581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.535'. [ 198.643911][ T7602] autofs: Unknown parameter '0x0000000000000000' [ 199.178195][ T7605] blktrace: Concurrent blktraces are not allowed on sg0 [ 199.717121][ T7605] netlink: 84 bytes leftover after parsing attributes in process `syz.1.539'. [ 202.595682][ T7626] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 203.834892][ T7628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.549'. [ 204.412454][ T7645] autofs: Unknown parameter '0x0000000000000000' [ 204.585164][ T7650] blktrace: Concurrent blktraces are not allowed on sg0 [ 204.595902][ T7650] netlink: 84 bytes leftover after parsing attributes in process `syz.0.555'. [ 206.352238][ T7671] blktrace: Concurrent blktraces are not allowed on sg0 [ 206.360843][ T7671] netlink: 84 bytes leftover after parsing attributes in process `syz.0.562'. [ 208.391552][ T7704] autofs: Unknown parameter '0x0000000000000000' [ 208.737340][ T7706] blktrace: Concurrent blktraces are not allowed on sg0 [ 208.879326][ T7701] netlink: 84 bytes leftover after parsing attributes in process `syz.2.573'. [ 211.116764][ T7742] autofs: Unknown parameter '0x0000000000000000' [ 211.872833][ T7766] blktrace: Concurrent blktraces are not allowed on sg0 [ 211.889114][ T7766] netlink: 84 bytes leftover after parsing attributes in process `syz.1.591'. [ 213.024989][ T7762] syz.3.592: attempt to access beyond end of device [ 213.024989][ T7762] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 213.079364][ T7762] XFS (nbd3): SB validate failed with error -5. [ 213.468281][ T7786] netlink: 'syz.4.596': attribute type 10 has an invalid length. [ 214.257371][ T7793] autofs: Unknown parameter 'fd0x0000000000000000' [ 217.124057][ T7820] blktrace: Concurrent blktraces are not allowed on sg0 [ 217.132646][ T7820] netlink: 84 bytes leftover after parsing attributes in process `syz.0.605'. [ 217.843488][ T7825] autofs: Unknown parameter 'fd0x0000000000000000' [ 218.039896][ T7835] netlink: 'syz.2.613': attribute type 10 has an invalid length. [ 222.276106][ T7866] autofs: Unknown parameter 'fd0x0000000000000000' [ 223.556991][ T7876] blktrace: Concurrent blktraces are not allowed on sg0 [ 223.991938][ T7876] netlink: 84 bytes leftover after parsing attributes in process `syz.1.622'. [ 224.534106][ T7887] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 224.813111][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.878431][ T7895] blktrace: Concurrent blktraces are not allowed on sg0 [ 224.891747][ T7895] netlink: 84 bytes leftover after parsing attributes in process `syz.0.631'. [ 224.997279][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 225.034885][ T25] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 225.085320][ T25] usb 5-1: config 179 has no interface number 0 [ 225.969109][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 225.980839][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 225.998924][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.072058][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 226.084063][ T25] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 226.097590][ T25] usb 5-1: config 179 interface 65 has no altsetting 0 [ 226.105239][ T25] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 226.114356][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.214072][ T7883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.236484][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input12 [ 227.322913][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 227.333296][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 228.789132][ T5876] usb 5-1: USB disconnect, device number 10 [ 228.795126][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 228.910266][ T5876] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 229.577424][ T7928] syz.0.640: attempt to access beyond end of device [ 229.577424][ T7928] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 229.621757][ T7928] XFS (nbd0): SB validate failed with error -5. [ 229.860100][ T7933] blktrace: Concurrent blktraces are not allowed on sg0 [ 229.868450][ T7933] netlink: 84 bytes leftover after parsing attributes in process `syz.4.639'. [ 230.337129][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 230.575827][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 230.742605][ T7953] netlink: 'syz.4.646': attribute type 10 has an invalid length. [ 230.771993][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 230.785661][ T5913] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 230.795879][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 230.804417][ T5913] usb 2-1: Product: syz [ 230.812224][ T5913] usb 2-1: Manufacturer: syz [ 230.818138][ T5913] usb 2-1: SerialNumber: syz [ 230.835194][ T5913] usb 2-1: config 0 descriptor?? [ 230.848301][ T7954] blktrace: Concurrent blktraces are not allowed on sg0 [ 230.858755][ T7954] netlink: 84 bytes leftover after parsing attributes in process `syz.0.643'. [ 231.012867][ T7925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.867502][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 232.480863][ T5907] usb 2-1: USB disconnect, device number 12 [ 234.218657][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 234.245436][ T25] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 234.254242][ T25] usb 1-1: config 179 has no interface number 0 [ 234.260743][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 234.272227][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 234.283639][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 234.295372][ T25] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 234.306127][ T25] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 234.319521][ T25] usb 1-1: config 179 interface 65 has no altsetting 0 [ 234.326419][ T25] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 234.335626][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.460201][ T7980] blktrace: Concurrent blktraces are not allowed on sg0 [ 234.468890][ T7980] netlink: 84 bytes leftover after parsing attributes in process `syz.1.652'. [ 234.498983][ T7964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.810437][ T7992] 9pnet_fd: Insufficient options for proto=fd [ 234.841627][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13 [ 234.852312][ T7989] syz.3.654: attempt to access beyond end of device [ 234.852312][ T7989] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 234.863499][ T25] usb 1-1: USB disconnect, device number 15 [ 234.865684][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 234.882146][ T25] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 234.896767][ T7989] XFS (nbd3): SB validate failed with error -5. [ 237.423887][ T8028] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 238.808328][ T8045] blktrace: Concurrent blktraces are not allowed on sg0 [ 238.822257][ T8045] netlink: 84 bytes leftover after parsing attributes in process `syz.0.668'. [ 239.762920][ T8051] 9pnet_fd: Insufficient options for proto=fd [ 240.513187][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 241.304264][ T8071] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 241.565600][ T8075] syz.3.679: attempt to access beyond end of device [ 241.565600][ T8075] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 241.579078][ T8075] XFS (nbd3): SB validate failed with error -5. [ 242.282129][ T8094] blktrace: Concurrent blktraces are not allowed on sg0 [ 242.296607][ T8094] netlink: 84 bytes leftover after parsing attributes in process `syz.3.682'. [ 243.394373][ T8100] 9pnet_fd: Insufficient options for proto=fd [ 243.959432][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 244.500044][ T8112] 9pnet_fd: Insufficient options for proto=fd [ 246.285488][ T8136] blktrace: Concurrent blktraces are not allowed on sg0 [ 246.294076][ T8136] netlink: 84 bytes leftover after parsing attributes in process `syz.4.693'. [ 246.897175][ T8138] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 247.314271][ T8148] syz.4.700: attempt to access beyond end of device [ 247.314271][ T8148] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 247.393398][ T8157] netlink: 84 bytes leftover after parsing attributes in process `syz.1.699'. [ 248.059316][ T8148] XFS (nbd4): SB validate failed with error -5. [ 248.210956][ T8161] 9pnet_fd: Insufficient options for proto=fd [ 250.105387][ T8179] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 250.538284][ T5879] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.927075][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 250.947182][ T5879] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 250.971576][ T8201] blktrace: Concurrent blktraces are not allowed on sg0 [ 250.985267][ T8201] netlink: 84 bytes leftover after parsing attributes in process `syz.4.715'. [ 251.020142][ T5879] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 251.031819][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 251.241367][ T8195] syz.2.714: attempt to access beyond end of device [ 251.241367][ T8195] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 251.588279][ T8195] XFS (nbd2): SB validate failed with error -5. [ 251.606973][ T5879] usb 2-1: Product: syz [ 251.611191][ T5879] usb 2-1: Manufacturer: syz [ 251.616950][ T5879] usb 2-1: SerialNumber: syz [ 251.623722][ T5879] usb 2-1: config 0 descriptor?? [ 251.630286][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.979440][ T5913] usb 2-1: USB disconnect, device number 13 [ 253.150689][ T8223] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 253.247965][ T8227] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 253.427274][ T8232] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 253.590033][ T8238] blktrace: Concurrent blktraces are not allowed on sg0 [ 253.604498][ T8238] netlink: 84 bytes leftover after parsing attributes in process `syz.3.726'. [ 254.758657][ T8252] fuse: Bad value for 'group_id' [ 254.796250][ T8252] fuse: Bad value for 'group_id' [ 255.939702][ T8266] 9pnet_fd: Insufficient options for proto=fd [ 255.976774][ T8268] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 256.786252][ T8281] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 257.148721][ T8285] syz.0.743: attempt to access beyond end of device [ 257.148721][ T8285] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 257.236671][ T8285] XFS (nbd0): SB validate failed with error -5. [ 257.552809][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.562614][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.653237][ T8308] blktrace: Concurrent blktraces are not allowed on sg0 [ 257.669047][ T8308] netlink: 84 bytes leftover after parsing attributes in process `syz.4.748'. [ 258.147152][ T8307] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 258.193270][ T8311] fuse: Bad value for 'group_id' [ 258.233048][ T8311] fuse: Bad value for 'group_id' [ 259.898442][ T8335] 9pnet_fd: Insufficient options for proto=fd [ 260.083417][ T8339] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 260.672474][ T8344] blktrace: Concurrent blktraces are not allowed on sg0 [ 260.680948][ T8344] netlink: 84 bytes leftover after parsing attributes in process `syz.1.763'. [ 261.056759][ T8357] syz.1.764: attempt to access beyond end of device [ 261.056759][ T8357] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 261.147161][ T8357] XFS (nbd1): SB validate failed with error -5. [ 261.245672][ T8358] netlink: 'syz.0.762': attribute type 9 has an invalid length. [ 261.285592][ T8368] 9pnet_fd: Insufficient options for proto=fd [ 262.390758][ T8380] 9pnet_fd: Insufficient options for proto=fd [ 262.621767][ T8382] process 'syz.3.769' launched './file1' with NULL argv: empty string added [ 263.363512][ T8388] fuse: Bad value for 'group_id' [ 263.382554][ T8388] fuse: Bad value for 'group_id' [ 263.858944][ T8399] blktrace: Concurrent blktraces are not allowed on sg0 [ 263.872950][ T8399] netlink: 84 bytes leftover after parsing attributes in process `syz.3.774'. [ 264.652543][ T8402] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 267.304443][ T8436] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 268.907987][ T8452] netlink: 84 bytes leftover after parsing attributes in process `syz.2.791'. [ 269.802301][ T8460] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 271.225785][ T8480] syz.3.801: attempt to access beyond end of device [ 271.225785][ T8480] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 271.247308][ T8480] XFS (nbd3): SB validate failed with error -5. [ 272.725546][ T8502] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 273.430865][ T8519] netlink: 'syz.2.811': attribute type 10 has an invalid length. [ 273.656987][ T974] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 273.830652][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 273.840584][ T974] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.868709][ T974] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.882448][ T974] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.894071][ T974] usb 2-1: Product: syz [ 273.902313][ T974] usb 2-1: Manufacturer: syz [ 273.917383][ T974] usb 2-1: SerialNumber: syz [ 273.925964][ T974] usb 2-1: config 0 descriptor?? [ 273.939118][ T8521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 274.340429][ T5879] usb 2-1: USB disconnect, device number 14 [ 275.475242][ T8547] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 276.481347][ T8558] netlink: 'syz.3.826': attribute type 10 has an invalid length. [ 277.176383][ T8577] blktrace: Concurrent blktraces are not allowed on sg0 [ 277.190433][ T8577] netlink: 84 bytes leftover after parsing attributes in process `syz.3.831'. [ 278.171147][ T8581] [ 278.173527][ T8581] ====================================================== [ 278.180667][ T8581] WARNING: possible circular locking dependency detected [ 278.187699][ T8581] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 278.194277][ T8581] ------------------------------------------------------ [ 278.201301][ T8581] syz.2.833/8581 is trying to acquire lock: [ 278.207194][ T8581] ffff8880302c7e88 (vm_lock){++++}-{0:0}, at: binder_alloc_free_page+0x150/0xd50 [ 278.216381][ T8581] [ 278.216381][ T8581] but task is already holding lock: [ 278.223745][ T8581] ffff88802ff28a30 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 278.232992][ T8581] [ 278.232992][ T8581] which lock already depends on the new lock. [ 278.232992][ T8581] [ 278.243388][ T8581] [ 278.243388][ T8581] the existing dependency chain (in reverse order) is: [ 278.252394][ T8581] [ 278.252394][ T8581] -> #3 (&l->lock){+.+.}-{3:3}: [ 278.259444][ T8581] lock_acquire+0x1ed/0x550 [ 278.264468][ T8581] _raw_spin_lock+0x2e/0x40 [ 278.269497][ T8581] lock_list_lru_of_memcg+0x24c/0x4d0 [ 278.275394][ T8581] list_lru_add+0x59/0x270 [ 278.280329][ T8581] list_lru_add_obj+0x17b/0x250 [ 278.285696][ T8581] iput+0x89c/0xa50 [ 278.290015][ T8581] __dentry_kill+0x20d/0x630 [ 278.295115][ T8581] shrink_kill+0xa9/0x2c0 [ 278.299956][ T8581] shrink_dentry_list+0x2c0/0x5b0 [ 278.305493][ T8581] shrink_dcache_sb+0x25e/0x3e0 [ 278.310855][ T8581] reconfigure_super+0x2c6/0x870 [ 278.316302][ T8581] path_mount+0xc22/0xfa0 [ 278.321162][ T8581] __se_sys_mount+0x2d6/0x3c0 [ 278.326358][ T8581] do_syscall_64+0xf3/0x230 [ 278.331401][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.337820][ T8581] [ 278.337820][ T8581] -> #2 (&sb->s_type->i_lock_key#23){+.+.}-{3:3}: [ 278.346429][ T8581] lock_acquire+0x1ed/0x550 [ 278.351550][ T8581] _raw_spin_lock+0x2e/0x40 [ 278.356590][ T8581] __mark_inode_dirty+0x3ff/0xe90 [ 278.362215][ T8581] file_update_time+0x3d2/0x450 [ 278.367696][ T8581] ext4_page_mkwrite+0x210/0x1100 [ 278.373250][ T8581] do_page_mkwrite+0x159/0x340 [ 278.378541][ T8581] do_wp_page+0x23cd/0x49b0 [ 278.383565][ T8581] __handle_mm_fault+0x24cf/0x70f0 [ 278.389296][ T8581] handle_mm_fault+0x3e2/0x8c0 [ 278.394568][ T8581] exc_page_fault+0x459/0x8b0 [ 278.399753][ T8581] asm_exc_page_fault+0x26/0x30 [ 278.405203][ T8581] [ 278.405203][ T8581] -> #1 (sb_pagefaults){.+.+}-{0:0}: [ 278.412770][ T8581] lock_acquire+0x1ed/0x550 [ 278.421010][ T8581] percpu_down_read+0x44/0x1b0 [ 278.426288][ T8581] ext4_page_mkwrite+0x1f9/0x1100 [ 278.432012][ T8581] do_page_mkwrite+0x159/0x340 [ 278.437397][ T8581] do_wp_page+0x23cd/0x49b0 [ 278.442426][ T8581] __handle_mm_fault+0x24cf/0x70f0 [ 278.448052][ T8581] handle_mm_fault+0x3e2/0x8c0 [ 278.453327][ T8581] exc_page_fault+0x459/0x8b0 [ 278.458602][ T8581] asm_exc_page_fault+0x26/0x30 [ 278.463963][ T8581] [ 278.463963][ T8581] -> #0 (vm_lock){++++}-{0:0}: [ 278.470994][ T8581] validate_chain+0x18ef/0x5920 [ 278.476449][ T8581] __lock_acquire+0x1397/0x2100 [ 278.481838][ T8581] lock_acquire+0x1ed/0x550 [ 278.486889][ T8581] lock_vma_under_rcu+0x35f/0x9a0 [ 278.492548][ T8581] binder_alloc_free_page+0x150/0xd50 [ 278.498460][ T8581] __list_lru_walk_one+0x170/0x470 [ 278.504083][ T8581] list_lru_walk_node+0xc4/0xa70 [ 278.509533][ T8581] binder_shrink_scan+0x138/0x260 [ 278.515070][ T8581] do_shrink_slab+0x72d/0x1160 [ 278.520344][ T8581] shrink_slab+0x1093/0x14d0 [ 278.525442][ T8581] drop_slab+0x142/0x280 [ 278.530195][ T8581] drop_caches_sysctl_handler+0xbc/0x160 [ 278.536345][ T8581] proc_sys_call_handler+0x5ec/0x920 [ 278.542158][ T8581] do_iter_readv_writev+0x71a/0x9d0 [ 278.547879][ T8581] vfs_writev+0x38b/0xbc0 [ 278.552811][ T8581] do_writev+0x1b6/0x360 [ 278.557566][ T8581] do_syscall_64+0xf3/0x230 [ 278.562674][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.569079][ T8581] [ 278.569079][ T8581] other info that might help us debug this: [ 278.569079][ T8581] [ 278.579296][ T8581] Chain exists of: [ 278.579296][ T8581] vm_lock --> &sb->s_type->i_lock_key#23 --> &l->lock [ 278.579296][ T8581] [ 278.591986][ T8581] Possible unsafe locking scenario: [ 278.591986][ T8581] [ 278.599423][ T8581] CPU0 CPU1 [ 278.604779][ T8581] ---- ---- [ 278.610133][ T8581] lock(&l->lock); [ 278.613940][ T8581] lock(&sb->s_type->i_lock_key#23); [ 278.621834][ T8581] lock(&l->lock); [ 278.628150][ T8581] rlock(vm_lock); [ 278.632034][ T8581] [ 278.632034][ T8581] *** DEADLOCK *** [ 278.632034][ T8581] [ 278.640179][ T8581] 4 locks held by syz.2.833/8581: [ 278.645185][ T8581] #0: ffff88807fa447f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 278.654234][ T8581] #1: ffff88807a520420 (sb_writers#3){.+.+}-{0:0}, at: vfs_writev+0x2d6/0xbc0 [ 278.663294][ T8581] #2: ffff88802ff28a30 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 278.672960][ T8581] #3: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 278.682972][ T8581] [ 278.682972][ T8581] stack backtrace: [ 278.688862][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: syz.2.833 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 278.688877][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.688885][ T8581] Call Trace: [ 278.688899][ T8581] [ 278.688906][ T8581] dump_stack_lvl+0x241/0x360 [ 278.688926][ T8581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.688939][ T8581] ? __pfx__printk+0x10/0x10 [ 278.688960][ T8581] print_circular_bug+0x13a/0x1b0 [ 278.688975][ T8581] check_noncircular+0x36a/0x4a0 [ 278.688993][ T8581] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 278.689010][ T8581] ? __pfx_check_noncircular+0x10/0x10 [ 278.689028][ T8581] ? lockdep_lock+0x123/0x2b0 [ 278.689045][ T8581] ? lockdep_unlock+0x16a/0x300 [ 278.689060][ T8581] validate_chain+0x18ef/0x5920 [ 278.689085][ T8581] ? __pfx_validate_chain+0x10/0x10 [ 278.689104][ T8581] ? __pfx_validate_chain+0x10/0x10 [ 278.689128][ T8581] ? look_up_lock_class+0x77/0x170 [ 278.689143][ T8581] ? register_lock_class+0x102/0x980 [ 278.689160][ T8581] ? __pfx_register_lock_class+0x10/0x10 [ 278.689174][ T8581] ? stack_trace_save+0x118/0x1d0 [ 278.689188][ T8581] ? mark_lock+0x9a/0x360 [ 278.689205][ T8581] __lock_acquire+0x1397/0x2100 [ 278.689226][ T8581] lock_acquire+0x1ed/0x550 [ 278.689241][ T8581] ? binder_alloc_free_page+0x150/0xd50 [ 278.689261][ T8581] ? __pfx_lock_acquire+0x10/0x10 [ 278.689281][ T8581] ? mas_walk+0x1f3/0x280 [ 278.689299][ T8581] lock_vma_under_rcu+0x35f/0x9a0 [ 278.689314][ T8581] ? binder_alloc_free_page+0x150/0xd50 [ 278.689329][ T8581] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 278.689343][ T8581] ? binder_alloc_free_page+0x150/0xd50 [ 278.689360][ T8581] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 278.689377][ T8581] ? __pfx_validate_chain+0x10/0x10 [ 278.689396][ T8581] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 278.689416][ T8581] binder_alloc_free_page+0x150/0xd50 [ 278.689436][ T8581] __list_lru_walk_one+0x170/0x470 [ 278.689449][ T8581] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 278.689466][ T8581] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 278.689482][ T8581] list_lru_walk_node+0xc4/0xa70 [ 278.689494][ T8581] ? mark_lock+0x9a/0x360 [ 278.689512][ T8581] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 278.689528][ T8581] ? __pfx_list_lru_walk_node+0x10/0x10 [ 278.689543][ T8581] binder_shrink_scan+0x138/0x260 [ 278.689560][ T8581] ? __pfx_binder_shrink_scan+0x10/0x10 [ 278.689579][ T8581] do_shrink_slab+0x72d/0x1160 [ 278.689599][ T8581] ? shrink_slab+0x12b/0x14d0 [ 278.689612][ T8581] shrink_slab+0x1093/0x14d0 [ 278.689628][ T8581] ? shrink_slab+0x12b/0x14d0 [ 278.689641][ T8581] ? __pfx_lock_release+0x10/0x10 [ 278.689662][ T8581] ? __pfx_shrink_slab+0x10/0x10 [ 278.689680][ T8581] ? mem_cgroup_iter+0x3d/0x420 [ 278.689694][ T8581] drop_slab+0x142/0x280 [ 278.689710][ T8581] drop_caches_sysctl_handler+0xbc/0x160 [ 278.689728][ T8581] ? __pfx_drop_caches_sysctl_handler+0x10/0x10 [ 278.689746][ T8581] proc_sys_call_handler+0x5ec/0x920 [ 278.689764][ T8581] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 278.689781][ T8581] do_iter_readv_writev+0x71a/0x9d0 [ 278.689801][ T8581] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 278.689816][ T8581] ? rcu_read_lock_any_held+0xb7/0x160 [ 278.689834][ T8581] vfs_writev+0x38b/0xbc0 [ 278.689848][ T8581] ? trace_contention_end+0x3c/0x120 [ 278.689860][ T8581] ? __mutex_lock+0x397/0x1010 [ 278.689875][ T8581] ? __pfx_vfs_writev+0x10/0x10 [ 278.689887][ T8581] ? up_write+0x1a9/0x590 [ 278.689903][ T8581] ? __fget_files+0x2a/0x410 [ 278.689916][ T8581] ? __fget_files+0x395/0x410 [ 278.689927][ T8581] ? __fget_files+0x2a/0x410 [ 278.689942][ T8581] do_writev+0x1b6/0x360 [ 278.689956][ T8581] ? __pfx_do_writev+0x10/0x10 [ 278.689968][ T8581] ? do_syscall_64+0x100/0x230 [ 278.689983][ T8581] ? do_syscall_64+0xb6/0x230 [ 278.689996][ T8581] do_syscall_64+0xf3/0x230 [ 278.690010][ T8581] ? clear_bhb_loop+0x35/0x90 [ 278.690029][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.690049][ T8581] RIP: 0033:0x7f5740d85d29 [ 278.690065][ T8581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.690075][ T8581] RSP: 002b:00007f5741b1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 278.690089][ T8581] RAX: ffffffffffffffda RBX: 00007f5740f75fa0 RCX: 00007f5740d85d29 [ 278.690098][ T8581] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 278.690106][ T8581] RBP: 00007f5740e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 278.690114][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.690121][ T8581] R13: 0000000000000000 R14: 00007f5740f75fa0 R15: 00007ffd98928218 [ 278.690134][ T8581] [ 279.649290][ T8581] syz.2.833 (8581): drop_caches: 2 [ 279.927877][ T5876] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 280.076930][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 280.084386][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 280.101159][ T5876] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 280.110481][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 280.119002][ T5876] usb 2-1: Product: syz [ 280.123301][ T5876] usb 2-1: Manufacturer: syz [ 280.127951][ T5876] usb 2-1: SerialNumber: syz [ 280.134518][ T5876] usb 2-1: config 0 descriptor?? [ 280.140297][ T8590] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.353084][ T5876] usb 2-1: USB disconnect, device number 15